This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json) Hash identifier: kQC5y3YIHLBuJM3dYERY4dGHQIJPXSzPPlpKXhx/Eqc= Subject key identifier: 45:C4:56:00:AE:20:C8:65:7E:48:FA:5C:9E:27:FD:07:5E:95:D8:F8 Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66 Certificate serial: 019BF4D0E817BFE6DC48A844A986F31F8C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft Manifest number: 0388 Signing time: Sun 25 Jan 2026 11:01:30 +0000 Manifest this update: Sun 25 Jan 2026 11:01:30 +0000 Manifest next update: Mon 26 Jan 2026 11:01:30 +0000 Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: hM5oCwvdwZqVA5MVIYK6/opnT47fPoRC2nCKk9XfL44=) 2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:e8:17:bf:e6:dc:48:a8:44:a9:86:f3:1f:8c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66 Validity Not Before: Jan 25 11:01:30 2026 GMT Not After : Jan 26 11:01:30 2026 GMT Subject: CN=45c45600ae20c8657e48fa5c9e27fd075e95d8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:61:c6:ce:5b:3d:1b:26:74:b3:27:c3:40: 3a:ba:e4:f4:f8:f4:02:71:03:99:51:0e:1c:b1:3b: 4f:a9:94:73:52:b2:82:ad:a9:a3:ae:10:69:c4:7b: 24:3e:8b:b0:ba:30:e5:02:70:29:03:3d:06:bb:56: 1b:b6:db:7b:6a:de:2b:26:7b:5c:d9:35:68:e2:1e: ab:44:d4:48:d9:44:fd:0d:9c:1f:46:fb:e5:8a:43: 0c:48:b1:96:ab:6d:35:2c:f2:9c:79:68:2d:a0:c4: 84:a1:d8:bf:18:96:45:34:c0:a9:42:a1:5c:cf:d4: cf:7d:26:8c:d3:a9:3d:60:27:09:2a:e2:f5:59:51: ea:87:56:64:ef:5c:2d:fc:95:88:16:89:10:94:26: 8c:07:c6:8c:f7:e7:ee:34:27:7e:cb:49:aa:31:2f: 5c:3d:b5:e2:07:10:db:36:c2:d3:4d:2b:97:b2:8c: 34:1c:51:96:ca:34:bb:f2:33:46:af:d6:8c:14:e7: 56:7e:33:c6:28:36:1e:ca:17:de:a7:51:6b:95:98: 48:5b:24:ed:48:d5:b0:03:98:11:22:72:aa:94:57: 6d:e4:58:a3:49:ab:b8:4e:b8:4c:0a:f4:02:53:91: 38:e0:35:81:49:17:23:f1:52:b7:8e:1d:cd:d5:4b: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C4:56:00:AE:20:C8:65:7E:48:FA:5C:9E:27:FD:07:5E:95:D8:F8 X509v3 Authority Key Identifier: keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c1:43:18:0f:ff:f3:ac:6f:10:dc:60:21:d0:82:09:93:76: ed:a3:d3:14:e5:68:de:5f:3b:07:f7:21:19:c0:d6:b7:c9:94: 9d:92:fc:5e:40:3b:13:fc:4a:70:57:7a:c6:07:8c:0f:fb:7e: 2a:02:e2:55:a4:64:74:e5:22:77:41:ce:31:96:2b:6a:77:da: b1:b1:f3:fc:5d:3e:da:9c:87:68:50:c7:e7:43:70:be:80:b7: 89:86:58:d2:95:7d:1a:d3:6c:c5:a0:3f:43:5e:3a:d0:1c:0f: 65:ea:cf:ae:d9:15:93:29:2c:e2:e4:d3:4d:c5:0b:fc:0c:b8: c7:12:e3:5a:a4:f8:c3:14:e3:74:27:c8:f3:fa:68:34:c4:fa: 00:1e:3d:d3:11:94:bb:2d:00:c1:e2:7d:81:b5:f7:48:4a:19: 99:67:a0:17:93:38:19:62:0b:5f:a2:b5:b6:4f:89:23:f7:68: 77:4d:68:d3:20:01:b7:dd:c0:00:9f:ef:c6:1a:5b:e9:90:fc: d6:ce:43:bd:bf:ec:f3:e6:0f:bb:21:e5:ac:9f:67:26:f5:ac: 15:09:28:f0:65:3f:d4:a5:05:74:e6:1b:5d:43:bb:9e:53:e2: 7f:73:4a:c2:7d:a8:75:30:b9:2d:72:08:96:f3:a8:a5:f9:c9: d4:94:14:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00OgXv+bcSKhEqYbzH4wNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez OGRjNjYwHhcNMjYwMTI1MTEwMTMwWhcNMjYwMTI2MTEwMTMwWjAzMTEwLwYDVQQD Eyg0NWM0NTYwMGFlMjBjODY1N2U0OGZhNWM5ZTI3ZmQwNzVlOTVkOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDFhxs5bPRsmdLMnw0A6uuT0+PQC cQOZUQ4csTtPqZRzUrKCramjrhBpxHskPouwujDlAnApAz0Gu1Ybttt7at4rJntc 2TVo4h6rRNRI2UT9DZwfRvvlikMMSLGWq201LPKceWgtoMSEodi/GJZFNMCpQqFc z9TPfSaM06k9YCcJKuL1WVHqh1Zk71wt/JWIFokQlCaMB8aM9+fuNCd+y0mqMS9c PbXiBxDbNsLTTSuXsow0HFGWyjS78jNGr9aMFOdWfjPGKDYeyhfep1FrlZhIWyTt SNWwA5gRInKqlFdt5FijSau4TrhMCvQCU5E44DWBSRcj8VK3jh3N1UvRcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXEVgCuIMhlfkj6XJ4n/Qdeldj4MB8GA1UdIwQY MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8FDGA// 86xvENxgIdCCCZN27aPTFOVo3l87B/chGcDWt8mUnZL8XkA7E/xKcFd6xgeMD/t+ KgLiVaRkdOUid0HOMZYranfasbHz/F0+2pyHaFDH50NwvoC3iYZY0pV9GtNsxaA/ Q1460BwPZerPrtkVkyks4uTTTcUL/Ay4xxLjWqT4wxTjdCfI8/poNMT6AB490xGU uy0AweJ9gbX3SEoZmWegF5M4GWILX6K1tk+JI/dod01o0yABt93AAJ/vxhpb6ZD8 1s5Dvb/s8+YPuyHlrJ9nJvWsFQko8GU/1KUFdOYbXUO7nlPif3NKwn2odTC5LXII lvOopfnJ1JQUXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:28 2026 by rpki-client